{"id":"https://openalex.org/W7129040331","doi":"https://doi.org/10.1109/tmm.2026.3664994","title":"Reinforcement and Complementary Space Search for Multimodal Black-Box Attack","display_name":"Reinforcement and Complementary Space Search for Multimodal Black-Box Attack","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7129040331","doi":"https://doi.org/10.1109/tmm.2026.3664994"},"language":null,"primary_location":{"id":"doi:10.1109/tmm.2026.3664994","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2026.3664994","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077946674","display_name":"Jiayu Li","orcid":"https://orcid.org/0000-0002-3458-2884"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiayu Li","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin Key Lab of Machine Learning, Tianjin University, Tianjin, China"],"raw_orcid":"https://orcid.org/0009-0006-3972-5473","affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin Key Lab of Machine Learning, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Boyuan Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Boyuan Zhang","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin Key Lab of Machine Learning, Tianjin University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin Key Lab of Machine Learning, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yucheng Shi","orcid":"https://orcid.org/0000-0002-8070-5363"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yucheng Shi","raw_affiliation_strings":["School of Computer and Artificial Intelligence, Zhengzhou University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-8070-5363","affiliations":[{"raw_affiliation_string":"School of Computer and Artificial Intelligence, Zhengzhou University, Zhengzhou, China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066355339","display_name":"Yahong Han","orcid":null},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yahong Han","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin Key Lab of Machine Learning, Tianjin University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0003-2768-1398","affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin Key Lab of Machine Learning, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15929781,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"28","issue":null,"first_page":"5395","last_page":"5406"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9620000123977661,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9620000123977661,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.006800000090152025,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.004100000020116568,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.6726999878883362},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.6532999873161316},{"id":"https://openalex.org/keywords/markov-decision-process","display_name":"Markov decision process","score":0.6445000171661377},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6197999715805054},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5296000242233276},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4715000092983246},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.41190001368522644},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.3628999888896942}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8256999850273132},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.6726999878883362},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.6532999873161316},{"id":"https://openalex.org/C106189395","wikidata":"https://www.wikidata.org/wiki/Q176789","display_name":"Markov decision process","level":3,"score":0.6445000171661377},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6197999715805054},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5519999861717224},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5324000120162964},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5296000242233276},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4715000092983246},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41190001368522644},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.3628999888896942},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.3467999994754791},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.29420000314712524},{"id":"https://openalex.org/C125583679","wikidata":"https://www.wikidata.org/wiki/Q755673","display_name":"Search algorithm","level":2,"score":0.28290000557899475},{"id":"https://openalex.org/C2779903281","wikidata":"https://www.wikidata.org/wiki/Q6888026","display_name":"Modalities","level":2,"score":0.2750000059604645},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.2639999985694885},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.26010000705718994},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.2529999911785126},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2500999867916107},{"id":"https://openalex.org/C163836022","wikidata":"https://www.wikidata.org/wiki/Q6771326","display_name":"Markov model","level":3,"score":0.25}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tmm.2026.3664994","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2026.3664994","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.8152204155921936}],"awards":[{"id":"https://openalex.org/G1297212625","display_name":null,"funder_award_id":"62376186","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Collaborative":[0],"attack,":[1],"an":[2],"adversarial":[3,75,125],"attack":[4,8,88,105,111,126],"method":[5],"that":[6],"could":[7,134,177],"multiple":[9],"modalities":[10],"simultaneously,":[11],"has":[12],"attracted":[13],"significant":[14],"interest":[15],"in":[16],"the":[17,36,74,124,136,154,161,164,169,179,183,187],"research":[18],"community.":[19],"Vision-Language":[20],"Pre-training":[21],"(VLP)":[22],"models":[23,48],"have":[24],"shown":[25],"their":[26],"vulnerability":[27],"to":[28,145,167],"collaborative":[29,44,70],"attacks,":[30],"as":[31,107,128],"they":[32],"perform":[33],"tasks":[34,192],"through":[35],"interaction":[37],"of":[38,63,80,158],"images":[39],"and":[40,54,90,101,196],"texts.":[41],"However,":[42],"current":[43],"attacks":[45,71],"against":[46],"VLP":[47,65,69],"are":[49],"mainly":[50],"focused":[51],"on":[52,77,116,189],"white-box":[53],"transfer-based,":[55],"which":[56,83,133,176],"require":[57],"full":[58],"or":[59],"partial":[60],"prior":[61],"knowledge":[62],"victim":[64],"models.":[66,114],"Besides":[67],"that,":[68],"iteratively":[72],"optimize":[73],"example":[76],"one":[78],"set":[79],"image-text":[81,174],"pairs,":[82,175],"may":[84],"ignore":[85],"other":[86],"potential":[87],"targets":[89],"cause":[91],"local":[92],"overfitting.":[93],"In":[94,182],"this":[95],"paper,":[96],"we":[97,121,185],"propose":[98],"a":[99,108,129,147],"reinforcement":[100,159],"complementary":[102,148],"space":[103,149],"search":[104,131,137,150,156],"(RCSS-Attack)":[106],"new":[109],"decision-based":[110],"for":[112],"multimodal":[113],"Based":[115],"Markov":[117],"Decision":[118],"Process":[119],"(MDP),":[120],"adaptatively":[122],"model":[123],"process":[127],"policy":[130],"process,":[132],"enlarge":[135],"space.":[138],"We":[139],"also":[140],"utilize":[141],"step-level":[142],"constraint":[143],"optimization":[144],"design":[146],"policy.":[151],"Benefiting":[152],"from":[153],"wide-range":[155],"capability":[157],"learning,":[160],"RCSS-Attack":[162,188],"uses":[163],"reward":[165],"mechanism":[166],"select":[168],"optimal":[170],"direction":[171],"between":[172],"different":[173],"relieve":[178],"overfitting":[180],"problem.":[181],"experiments,":[184],"evaluate":[186],"4":[190,197],"V+L":[191],"with":[193],"3":[194],"datasets":[195],"metrics.":[198]},"counts_by_year":[],"updated_date":"2026-07-03T06:15:21.484131","created_date":"2026-02-17T00:00:00"}